ci.yml

name: CI
on:
  pull_request:

jobs:
  validate:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        environment: [lab, prod]
    env:
      SOPS_AGE_KEY: ${{ secrets.SOPS_AGE_PRIVATE_KEY }}
    steps:
      - name: Checkout code
        uses: actions/checkout@master

      - name: Install pre-requisites
        run: |
          yarn
          helm plugin install https://github.com/jkroepke/helm-secrets && helm secrets patch unix
          sudo wget -O /usr/bin/sops https://github.com/mozilla/sops/releases/download/v3.7.3/sops-v3.7.3.linux.amd64
          sudo wget -O /usr/bin/kubescape https://github.com/kubescape/kubescape/releases/download/v2.3.8/kubescape-ubuntu-latest
          sudo chmod a+x /usr/bin/sops
          sudo chmod a+x /usr/bin/kubescape

      - name: Download helm chart dependencies
        run: yarn deps:all

      - name: Validate values
        run: yarn validate-values:all

      - name: Lint charts
        run: yarn lint:all ${{ matrix.environment }}

      - name: Render charts
        run: yarn render:all ${{ matrix.environment }}

      - name: Scan all charts for vulnerabilities
        run: |
          yarn scan:all ${{ matrix.environment }}

  e2e-lab-local:
    uses: homecentr/e2e/.github/workflows/run-e2e.yml@master
    needs:
      - validate
    with:
      environment: lab
      client: local
    secrets:
      sops_age_key: ${{ secrets.SOPS_AGE_PRIVATE_KEY }}

  e2e-lab-remote:
    uses: homecentr/e2e/.github/workflows/run-e2e.yml@master
    needs:
      - validate
    with:
      environment: lab
      client: remote
    secrets:
      sops_age_key: ${{ secrets.SOPS_AGE_PRIVATE_KEY }}